Sagt Logfile was dazu: Nach Bildschirmwackeln kein I-Net verfügbar

Paumuell

Hallo Shadowdance,

zuerst einmal ganz lieben Dank, dass du dir meinen Logfile ansehen willst.

Habe alle so wie von dir beschrieben im abgesicherter Modus gemacht. Hier das Ergebnis:

=>Total Number of Files Scanned: 134810
=>Total Number of Virus(es) Found: 111
***** Scanning complete. *****

upps, habe ich erst gedacht, warum finden die aktuellen Scanner von Antivir, Adaware, Spybot nix???


Hier jetzt die Auflistung:

C:\Programme\RealVNC\WinVNC\WinVNC.exe infected by not-a-virus:RiskWare.RemoteAdmin.WinVNC-based.c 12:59:48:500 :[00000001]
File C:\WINDOWS\System32\securer\syshost.exe infected by TrojanSpy.Win32.Agent.w
File C:\WINDOWS\hosts infected by Trojan.Win32.Qhost.k
File C:\WINDOWS\loadnew.exe infected by TrojanDownloader.Win32.Small.yx
File C:\WINDOWS\System32\securers.dll infected by TrojanSpy.Win32.Agent.w
\TEMPOR~1\Content.IE5\6VQ3YXIV\loadadv156[1].exe infected by TrojanDownloader.Win32.Small.yx
\TEMPOR~1\Content.IE5\6VQ3YXIV\x[1].chm infected by TrojanDownloader.Win32.Small.yx
\TEMPOR~1\Content.IE5\AZQV69Y3\classload[1].jar infected by Trojan.Java.ClassLoader.c
\TEMPOR~1\Content.IE5\AZQV69Y3\x[1].chm infected by TrojanDownloader.Win32.Small.yx
\TEMPOR~1\Content.IE5\B3XBZDKO\js[1].htm infected by Exploit.CodeBaseExec
\TEMPOR~1\Content.IE5\B3XBZDKO\x[1].chm infected by TrojanSpy.Win32.Agent.w
\TEMPOR~1\Content.IE5\CJCTQTI7\enter[1].htm infected by Trojan-Downloader.JS.Psyme.ae
\TEMPOR~1\Content.IE5\CJCTQTI7\open[1].exe infected by TrojanSpy.Win32.Agent.w
\TEMPOR~1\Content.IE5\O1CRGNK3\bridge-c15[1].cab infected by not-a-virus:AdWare.WinAD.n
\TEMPOR~1\Content.IE5\O1CRGNK3\loadadv157[1].exe infected by TrojanDownloader.Win32.Small.yx
\TEMPOR~1\Content.IE5\O1CRGNK3\load[1].exe infected by TrojanDownloader.Win32.Small.yx
\TEMPOR~1\Content.IE5\P3JZLT0E\index[1].htm infected by Trojan-Downloader.JS.Small.y
\TEMPOR~1\Content.IE5\W3LFIEJ1\loaderadv156[1].jar infected by Trojan.Java.ClassLoader.h
\TEMPOR~1\Content.IE5\W3LFIEJ1\loaderadv157[1].jar infected by Trojan.Java.ClassLoader.h


Da es offenbar zu viele Zeichen/Zeilen sind, hab ich das kplt. Ergebnis als zweiteiligen Anhang (050124eScan.txt und 050124eScan2.txt) beigefügt...


19:01:16:781 :[00000001] File C:\Programme\RealVNC\WinVNC\othread2.dll infected by not-a-virus:RiskWare.RemoteAdmin.WinVNC-based.c
19:01:16:843 :[00000001] File C:\Programme\RealVNC\WinVNC\vnchooks.dll infected by not-a-virus:RiskWare.RemoteAdmin.WinVNC-based.c
19:09:46:296 :[00000001] File C:\System Volume Information\_restore{9C69B003-367F-4800-B26A-51EFD0541C77}\RP365\A0031436.exe infected by Trojan.Win32.Qhost.al
19:10:40:062 :[00000001] File C:\System Volume Information\_restore{9C69B003-367F-4800-B26A-51EFD0541C77}\RP372\A0032747.exe infected by TrojanDownloader.Win32.Small.yx
19:10:41:296 :[00000001] File C:\System Volume Information\_restore{9C69B003-367F-4800-B26A-51EFD0541C77}\RP372\A0032756.exe infected by TrojanSpy.Win32.Agent.w
19:31:17:609 :VirusCount = 116626 Latest Date = 2005/01/24
[msvLclnt.dll] [0x000001dc] 24/01/2005 20:08:04:359 :VirusCount = 116626 Latest Date = 2005/01/24